CVE-2025-38207 mm: fix uprobe pte be overwritten when expanding vma

In the Linux kernel, the following vulnerability has been resolved: mm: fix uprobe pte be overwritten when expanding vma Patch series "Fix uprobe pte be overwritten when expanding vma". This patch of 4: We encountered a BUG alert triggered by Syzkaller as follows: BUG: Bad rss-counter state...

CVE-2025-38179

Technical details about CVE-2025-38179 (affected product/component, root cause, impact, exploitability, or patch information) are not publicly provided in the connected documents. Monitor for updates.

CVE-2025-4414

creationtimestamp| type| source ---|---|--- 2025-07-04 13:03:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt5cjppfhb2p...

CVE-2025-28968

creationtimestamp| type| source ---|---|--- 2025-07-04 12:36:27+00:00| seen| https://bsky.app/profile/potato.software/post/3lt5az3r2vh2s...

CVE-2025-38176

In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in binderfsevictinode Running 'stress-ng --binderfs 16 --timeout 300' under KASAN-enabled kernel, I've noticed the following: BUG: KASAN: slab-use-after-free in binderfsevictinode+0x1de/0x2d0 Write of...

CVE-2024-3366

creationtimestamp| type| source ---|---|--- 2025-07-04 11:01:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114794620052697504...

MAL-2025-6521 Malicious code in hellotesthim (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a7a4369b02deb0d2a9cf1340be0efe760e29f7979e3f7361ba029a282b70597f Series of packages mostly with an obfuscated infostealer attempting to collect Chrome data. While discord webhook is usually set to an example, there are other...

CVE-2025-30947

creationtimestamp| type| source ---|---|--- 2025-07-04 09:55:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4xz6tyzr2o...

CVE-2025-28967

creationtimestamp| type| source ---|---|--- 2025-07-04 09:46:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4xiktfc22a 2025-08-06 13:54:19+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:21+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448...

CVE-2025-32918

creationtimestamp| type| source ---|---|--- 2025-07-04 08:44:34+00:00| seen| https://bsky.app/profile/potato.software/post/3lt4u2hbqlj2v 2025-07-04 09:15:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4vrn2w4b2s...

CVE-2025-6786

creationtimestamp| type| source ---|---|--- 2025-07-04 07:25:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4pn3cgjw2r...

CVE-2025-6787

creationtimestamp| type| source ---|---|--- 2025-07-04 07:09:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4opmfcpn2p...

CVE-2025-34067

creationtimestamp| type| source ---|---|--- 2025-07-04 02:56:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lt4algwsbr22 2025-07-05 14:48:11+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3lt7ytg4ko22u 2025-07-05 21:02:18+00:00| seen|...

CVE-2025-38210: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: configfs-tsm-report: Fix NULL dereference of tsmops Unlike sysfs, the lifetime of configfs objects is controlled by userspace. There is no mechanism for the kernel to find and delete all created config-items. Instead, the...

SUSE CVE-2025-38103

In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhidparse Update struct hiddescriptor to better reflect the mandatory and optional parts of the HID Descriptor as per USB HID 1.11 specification. Note: the kernel currently...

SUSE CVE-2025-38129

In the Linux kernel, the following vulnerability has been resolved: pagepool: Fix use-after-free in pagepoolrecycleinring syzbot reported a uaf in pagepoolrecycleinring: BUG: KASAN: slab-use-after-free in lockrelease+0x151/0xa30 kernel/locking/lockdep.c:5862 Read of size 8 at addr ffff8880286045a...

SUSE CVE-2025-38141

In the Linux kernel, the following vulnerability has been resolved: dm: fix dmblkreportzones If dmgetlivetable returned NULL, dmputlivetable was never called. Also, it is possible that md-zonerevalidatemap will change while calling this function. Only read it once, so that we are always using the...

CVE-2025-53490

creationtimestamp| type| source ---|---|--- 2025-07-03 19:09:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3gi4vyqv2p...

CVE-2025-38119

In the Linux kernel, the following vulnerability has been resolved: scsi: core: ufs: Fix a hang in the error handler ufshcderrhandlingprepare calls ufshcdrpmgetsync. The latter function can only succeed if UFSHCDEHINPROGRESS is not set because resuming involves submitting a SCSI command and...

Wordfence Intelligence Weekly WordPress Vulnerability Report (June 23, 2025 to June 29, 2025)

Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...